Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Windows Event Log support #3887

Merged
merged 16 commits into from Dec 12, 2017
Merged

Windows Event Log support #3887

merged 16 commits into from Dec 12, 2017

Commits on Nov 27, 2017

  1. WindowsLogEvent: Add manifest file and update the resource script.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    9769064 View commit details
    Browse the repository at this point in the history

  2. WindowsEventLogger: Rename the resource file to windows_resources.rc.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    8abb8e4 View commit details
    Browse the repository at this point in the history

  3. WindowsEventLog: Base implementation.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    9cdfd79 View commit details
    Browse the repository at this point in the history

  4. WindowsEventLog: The message levels were not set correctly.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    bfa7956 View commit details
    Browse the repository at this point in the history

  5. Logger: The built-in systemLog() function now supports Windows Event Log

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    bd6e389 View commit details
    Browse the repository at this point in the history

  6. Windows Package: Add support for the Windows Event Log (see details). 

    The Windows Event Log manifest file (osquery.man) is now shipped
with the package. The manage-osqueryd.ps1 script has been updated
to (un)install as part of service configuration (-install and
-uninstall switches).
    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    efbcaa8 View commit details
    Browse the repository at this point in the history

  7. Converted all newlines to unix format

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    fa3c847 View commit details
    Browse the repository at this point in the history

  8. Code formatted with clang-format.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    fdc38f2 View commit details
    Browse the repository at this point in the history

  9. Windows Service Manager: Two new configuration switches (see details). 

    Changes on the 'manage-osqueryd.ps1' script:

The Windows Event Log manifest installation/uninstallation has been
moved out of the '-install' and '-uninstall' commands. The script
now supports the following two parameters: '-install_wel_manifest'
and -uninstall_wel_manifest.
    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    1479cf8 View commit details
    Browse the repository at this point in the history

  10. Code review changes.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    65a0916 View commit details
    Browse the repository at this point in the history

  11. Windows Service Manager: Allow a custom WEL manifest path.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    dfefc9a View commit details
    Browse the repository at this point in the history

  12. WindowsEventLog: Update the documentation.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    ef0acd7 View commit details
    Browse the repository at this point in the history

  13. Code review changes.

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    d591f1d View commit details
    Browse the repository at this point in the history

  14. WEL (Win): Move the generated files in tools/wel and fix includes

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    f02eebe View commit details
    Browse the repository at this point in the history

  15. WEL (Win): Update the package generator to acquire the WEL manifest

    @alessandrogario
    alessandrogario committed Nov 27, 2017
    Configuration menu
    Copy the full SHA
    ab32552 View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2017

  1. Code review changes 

     > Add missing if brackets
 > Fix the variable and command names in the manage-osqueryd.ps1
   script.
 > Update the documentation.
    @alessandrogario
    alessandrogario committed Dec 1, 2017
    Configuration menu
    Copy the full SHA
    8b69a9b View commit details
    Browse the repository at this point in the history